Lucene search
+L

1448 matches found

osv_debian
osv_debian
•added 2022/06/23 11:15 a.m.•12 views

DEBIAN-CVE-2022-34305

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.1CVSS7.3AI score0.06714EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/06/23 11:15 a.m.•64 views

CVE-2022-34305

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.1CVSS6.9AI score0.06714EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/06/23 11:15 a.m.•9 views

CVE-2022-34305

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.1CVSS6.8AI score0.06714EPSS
SaveExploits1References6Affected Software1
Prion
Prion
•added 2022/06/23 11:15 a.m.•52 views

Cross site scripting

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

4.3CVSS6.1AI score0.06714EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
•added 2022/06/23 10:30 a.m.•77 views

CVE-2022-34305

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.1CVSS8AI score0.06714EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/06/23 10:30 a.m.•65 views

CVE-2022-34305 XSS in examples web application

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.4AI score0.06714EPSS
SaveExploits1References4
Mend
Mend
•added 2022/06/23 10:30 a.m.•7 views

CVE-2022-34305

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.1CVSS0.06714EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2022/06/23 10:30 a.m.•6 views

CVE-2022-34305 XSS in examples web application

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

0.06714EPSS
SaveExploits1References4
Snyk
Snyk
•added 2022/06/23 9:25 a.m.•9 views

Malicious Package

Overview influxdb-client-examples is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7AI score
SaveExploits0References3
Snyk
Snyk
•added 2022/06/23 9:24 a.m.•21 views

Malicious Package

Overview handsontable-examples is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/23 12:00 a.m.•9 views

CVE-2022-34305: Improper Neutralization of Input During Web Page Generation

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.1CVSS6.3AI score0.06714EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
•added 2022/06/23 12:00 a.m.•1125 views

Apache Tomcat 9.0.30 < 9.0.65

The version of Tomcat installed on the remote host is prior to 9.0.65. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.65security-9 advisory. - In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form...

6.1CVSS7.4AI score0.06714EPSS
SaveExploits1References3
FreeBSD
FreeBSD
•added 2022/06/22 12:00 a.m.•51 views

Tomcat -- XSS in examples web application

Apache Tomcat reports: The Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...

6.1CVSS1.5AI score0.06714EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:15 p.m.•12 views

Malicious code in patreon-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b4c9c5b8c53ac331becc99f1d1b6de3dd3bcd03c7fee11e5d4a6684c32024b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:15 p.m.•19 views

MAL-2022-5229 Malicious code in patreon-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b4c9c5b8c53ac331becc99f1d1b6de3dd3bcd03c7fee11e5d4a6684c32024b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:14 p.m.•14 views

Malicious code in react-dnd-examples-decorators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b335bf9dc6443f555a9a3ebeeadd7bebecedee805e6bf3c7d0eb551895a34647 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:14 p.m.•29 views

MAL-2022-5639 Malicious code in react-dnd-examples-decorators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b335bf9dc6443f555a9a3ebeeadd7bebecedee805e6bf3c7d0eb551895a34647 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:10 p.m.•18 views

MAL-2022-2144 Malicious code in component-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 525e90b77d9794e6eaeb7b0ad0c70481ca70086b882fe64d2dd07d0e29abc00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:10 p.m.•10 views

Malicious code in component-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 525e90b77d9794e6eaeb7b0ad0c70481ca70086b882fe64d2dd07d0e29abc00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2022/06/17 12:01 a.m.•3 views

org.drools.planner:drools-planner-core (5.1.0.cr1), org.drools.planner:drools-planner-examples (5.1.0.cr1) +17 more potentially affected by CVE-2021-41411 via org.drools:drools-core (5.1.0.cr1)

org.drools:drools-core MAVEN version 5.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.1.0.cr1 - org.drools.planner:drools-planner-examples 5.1.0.cr1 -...

9.8CVSS0.01285EPSS
SaveExploits0
Rows per page
Query Builder